$ rpki-client -vvf rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/A135DDD4162211EC9B4B6F77C4F9AE02.roa File: A135DDD4162211EC9B4B6F77C4F9AE02.roa (raw, json) Hash identifier: CGg33H9/VkhPgziJXWcA6Qz7BN3epjzI9EHcIP++h+Y= Subject key identifier: AA:99:22:1F:99:AD:46:71:5B:10:4F:24:D5:6C:80:8D:4C:3A:43:C8 Certificate issuer: /CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A Certificate serial: 1620 Authority key identifier: B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/A135DDD4162211EC9B4B6F77C4F9AE02.roa Signing time: Mon 02 Jun 2025 16:56:59 +0000 ROA not before: Mon 02 Jun 2025 16:56:59 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137464 IP address blocks: 103.109.236.0/24 maxlen: 24 103.109.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5664 (0x1620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D671F, serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A Validity Not Before: Jun 2 16:56:59 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=683dd7db-6eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:e4:84:e6:89:af:22:a6:79:a8:04:e9:62: 5c:d0:ab:2a:12:82:6d:e1:b2:aa:61:33:ff:c9:8e: e6:26:e8:7e:c1:6e:d5:d2:3e:5e:1c:94:f0:7e:de: 2f:3d:41:57:d6:32:06:c0:5f:4d:f4:57:6f:c1:6b: 1b:c7:11:59:c0:3c:45:ce:11:52:07:5f:70:36:d5: b8:72:51:88:4f:ba:f4:b4:fc:77:ac:ed:3f:50:f5: 9b:12:2d:3d:fb:84:69:fb:ee:13:c1:03:7f:e1:98: 20:09:eb:fb:23:e3:41:f4:6f:9b:c9:ac:ef:f8:c4: fe:05:21:7a:2c:87:8b:c3:2a:12:fa:1c:07:37:eb: 2e:92:d7:a0:9e:2a:20:cd:98:36:6b:7d:7f:c8:8e: c4:f2:b5:94:d5:d5:56:2f:4f:fd:07:56:29:34:ba: 2e:a3:89:9e:51:2e:96:54:d9:55:d6:e0:2b:88:1a: 07:64:aa:66:18:fa:e5:01:ff:b2:df:83:31:a4:96: 6b:66:66:97:13:da:fc:9c:fa:f4:54:89:4c:0d:56: 9b:5e:36:1b:73:4e:b3:fd:23:d8:28:d4:52:67:a4: b0:28:a8:d7:4b:e1:ed:ca:26:e4:7b:d7:76:ff:74: ec:cb:3f:95:8f:b8:55:83:93:0f:f4:2f:17:2e:a9: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:99:22:1F:99:AD:46:71:5B:10:4F:24:D5:6C:80:8D:4C:3A:43:C8 X509v3 Authority Key Identifier: keyid:B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/A135DDD4162211EC9B4B6F77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.236.0/23 Signature Algorithm: sha256WithRSAEncryption 41:6f:9f:f3:54:c6:9c:32:e0:4c:8c:71:0b:7e:12:0d:0b:76: 47:6e:11:ff:60:08:42:0e:8f:9a:e8:29:ae:60:9a:c6:54:9c: 3e:9d:2b:ee:f2:21:32:e3:fc:8b:10:e8:90:94:8c:02:fc:71: 24:4d:d0:e8:fc:8a:13:92:ba:78:73:7a:46:c9:91:79:f0:f2: 3a:9c:b1:87:5a:33:11:24:3c:9e:bc:6e:89:f0:53:15:95:b3: 22:7f:af:f0:61:eb:d7:75:99:27:1b:a5:ba:75:3a:79:0f:c6: c3:87:47:c3:ec:1e:b9:04:bc:af:ba:8e:65:49:fb:35:30:f7: ac:67:8a:f6:4a:b0:b3:c7:5b:c9:c6:22:eb:59:16:1e:5d:ed: 80:e1:c2:a0:19:71:87:78:73:a5:26:51:c8:6d:da:03:a5:1b: 5c:f6:3b:2e:4e:1d:33:7d:ce:a3:4a:f6:7a:39:39:20:53:97: ff:1c:e6:72:43:8e:e6:1c:47:ad:ff:81:6d:7c:4b:84:e7:dd: 59:91:78:22:41:13:65:a4:b7:9a:23:76:b3:23:ad:89:ef:07: c8:eb:b9:2d:82:c1:2c:7d:0d:e2:37:4b:25:51:9c:72:e6:d0: 8b:69:87:a4:ce:7e:99:87:13:02:ba:53:af:23:1a:ba:5b:8c: 18:27:85:3f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MUYxMTAvBgNVBAUTKEIzQzhGN0UwNjREQTlCNUFBNkVBNzk2MDE3RUM2MEQy ODkwMzc4MkEwHhcNMjUwNjAyMTY1NjU5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODNkZDdkYi02ZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtvkhOaJryKmeagE6WJc0KsqEoJt4bKqYTP/yY7mJuh+wW7V0j5eHJTwft4v PUFX1jIGwF9N9FdvwWsbxxFZwDxFzhFSB19wNtW4clGIT7r0tPx3rO0/UPWbEi09 +4Rp++4TwQN/4ZggCev7I+NB9G+byazv+MT+BSF6LIeLwyoS+hwHN+suktegniog zZg2a31/yI7E8rWU1dVWL0/9B1YpNLouo4meUS6WVNlV1uAriBoHZKpmGPrlAf+y 34MxpJZrZmaXE9r8nPr0VIlMDVabXjYbc06z/SPYKNRSZ6SwKKjXS+Htyibke9d2 /3Tsyz+Vj7hVg5MP9C8XLqmS3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKqZIh+Z rUZxWxBPJNVsgI1MOkPIMB8GA1UdIwQYMBaAFLPI9+Bk2ptapup5YBfsYNKJA3gq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcxRi8xRURDMTBCQzE3 MUUxMUU4ODU2QkM0NDNDNEY5QUUwMi9zOGozNEdUYW0xcW02bmxnRi14ZzBva0Rl Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4ajM0R1RhbTFxbTZubGdGLXhnMG9rRGVDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDY3MUYvMUVEQzEwQkMxNzFFMTFFODg1NkJDNDQzQzRGOUFFMDIvQTEzNURERDQx NjIyMTFFQzlCNEI2Rjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnbewwDQYJKoZIhvcNAQELBQADggEBAEFvn/NUxpwy4EyM cQt+Eg0LdkduEf9gCEIOj5roKa5gmsZUnD6dK+7yITLj/IsQ6JCUjAL8cSRN0Oj8 ihOSunhzekbJkXnw8jqcsYdaMxEkPJ68bonwUxWVsyJ/r/Bh69d1mScbpbp1OnkP xsOHR8PsHrkEvK+6jmVJ+zUw96xnivZKsLPHW8nGIutZFh5d7YDhwqAZcYd4c6Um Ucht2gOlG1z2Oy5OHTN9zqNK9no5OSBTl/8c5nJDjuYcR63/gW18S4Tn3VmReCJB E2Wkt5ojdrMjrYnvB8jruS2CwSx9DeI3SyVRnHLm0Itph6TOfpmHEwK6U68jGrpb jBgnhT8= -----END CERTIFICATE-----Generated at Thu Jun 19 18:19:24 2025 by rpki-client